mantis-report
Generates a human-readable security review packet compiled from confirmed findings and exploit chains. Use at the end of a review cycle to produce stakeholder-facing documentation. Don't use for auditing code or verifying patches directly. Use when the user requests mantis report or invokes mantis-report.
- License 许可
- CC-BY-4.0
- 最近更新
- 2026-11-14
- Stars
- ★ 1
- Forks
- 0
01 前言 Front Matter
- name
- mantis-report
- license
- CC-BY-4.0
- metadata
- { "author": "AEOS", "version": "1.0.0", "owner_agent": "codenavi-agent" }
- description
- Generates a human-readable security review packet compiled from confirmed findings and exploit chains. Use at the end of a review cycle to produce stakeholder-facing documentation. Don't use for auditing code or verifying patches directly. Use when the user requests mantis report or invokes mantis-report.
03 SKILL.md 正文
Compatibility entry
Canonical contract: mantis-report.
Read that file and only the linked modules needed for this task. All resources and substantive instructions are in its canonical package.
Governance: CodENavi Full Workspace v2. One agent: codenavi-agent.
04 同仓库更多 Skills
workspace-brain
Operate the CodENavi workspace brain MCP and CLI — cloud DeepSeek RAG, disk corpus at WORKSPACE_BRAIN_ROOT, Jev URL curation, and event logging for Cursor/Codex/OpenCode/Claude. Use when ingesting repo knowledge, asking the brain, mapping web seeds, or recording AI-driven file changes. Do NOT use for local Ollama RAG or storing API keys in git.
workbench-profile-resolver
Provide enterprise-grade capability for `workbench-profile-resolver` inside AEOS v1.1. Use when the user requests workbench profile resolver or invokes workbench-profile-resolver. Do NOT use for unrelated tools or unapproved remote writes.
wordpress-expert
Staff-level WordPress engineering super-skill for one-shot site mapping, clean-code AI-assisted project creation/modification, the complete installed plugin universe, governed remote wp-admin operations, themes/blocks/layout, third-party integrations and production-safe changes. Use when the user requests wordpress expert or invokes wordpress-expert. Do NOT use for unrelated languages, domains or production deployment.
whatsapp-simulator
Generate synthetic WhatsApp-style conversation fixtures for testing conversational systems, support flows and automation. Use when the user requests whatsapp simulator or invokes whatsapp-simulator. Do NOT use for unrelated tools or unapproved remote writes.
web-quality-audit
Assimilated TLC/web-quality multi-area audit. Review performance, accessibility, SEO and best practices in one pass. Triggers: audit my site, review web quality, check page quality, optimize my website across areas. Do not use for a single-area job (core-web-vitals, ai-seo, best-practices, perf-lighthouse).
voiceai
Provide an evidence-backed voice interface for AEOS. Activating this skill is treated as explicit current-session consent for `voiceai` to record user audio or transcribe audio from user-authorized audio/video media within the declared scope. The skill can: Use when the user requests voiceai or invokes voiceai. Do NOT use for unrelated tools or unapproved remote writes.